•Application Security Engineer (DevSecOps & AI) (WTL, ON)

Recrute Action; Southwestern Ontario; Hybrid; CAD 80,000 - 100,000; Full time

Job summary

A leading recruitment agency is seeking a Senior Application Security Engineer to integrate security in the DevSecOps pipeline. This hybrid role in Southwestern Ontario involves overseeing security tool performance, managing vulnerabilities, and leading AI initiatives. Applicants should have at least 5 years in cybersecurity, with a strong background in application security and related tools. The position offers competitive pay and a full-time schedule.

Benefits

Competitive hourly salary

Work with an inclusive team

12-month job assignment

Qualifications

• 5+ years of experience in cybersecurity or vulnerability assessment.
• Hands-on experience with security tools and DevSecOps processes.
• Familiarity with cloud-native security practices.

Responsibilities

• Integrate and optimize application security tools within the DevSecOps pipeline.
• Manage application security findings from various tools.
• Automate security processes to enhance operational efficiency.

Skills

Application security expertise

DevSecOps processes

Scripting languages (Python, Bash)

Leadership in AI initiatives

Knowledge of open source vulnerabilities

Education

Bachelor’s degree in Information Systems or Computer Science

Tools

SAST tools

DAST tools

Secret monitoring tools

Job description

Application Security Engineer (DevSecOps & AI)

This role is part of the Application Security team within the broader Cybersecurity function. The team is focused on embedding security into the software development lifecycle. The position will serve as a senior contributor, leading tool integration, automation, and AI initiatives, while also supporting repository management and triage efforts.

What is in it for you :

• Salaried : $74-84 per hour.
• Incorporated Business Rate : $90-100 per hour.
• 12-month job assignment
• Full-time position : 37.50 hours per week.
• Hybrid role : 3 days in the office
• Join a passionate and inclusive team of professionals.

Responsibilities :

• Integrate and optimize application security tools within the DevSecOps pipeline.
• Triage and manage application security findings from SAST, SCA, DAST, and secret monitoring.
• Troubleshoot and enhance the performance of security tools.
• Automate security processes to enhance operational efficiency.
• Oversee and manage source code repositories.
• Lead the design and management of AI initiatives in application security and quality assurance.
• Stay updated on cybersecurity threats and trends through research and training.

What you will need to succeed :

• Bachelor’s degree in Information Systems, Computer Science, or related field (or equivalent experience).
• Minimum of 5 years of experience in cybersecurity, information security, or vulnerability assessment.
• Proficient in application security, particularly with open source vulnerabilities, SAST, and DAST tools.
• Hands-on experience with security tools and DevSecOps processes.
• Proficiency in scripting languages for automating vulnerability management (e.g., Python, Bash).
• Experience with source code repository management.
• Proven leadership in AI initiatives and strategic projects.
• Experience with secret monitoring tools.
• Familiarity with cloud-native security practices.
• Preferred Certifications : CISSP – Certified Information Systems Security Professional and CISM – Certified Information Security Manager

Why Recruit Action?

Recruit Action (agency permit : AP-2504511) provides recruitment services through quality support and a personalized approach to job seekers and businesses. Only candidates who match hiring criteria will be contacted. # MFCJP00015636